Today Google introduces a new video demo series that speaks to practical ways Google SecOps helps you defend your institution. While there are a lot of features built into the platform, I wanted to show how Google SecOps helps security practitioners do their important work and be better at it.
It’s easy to know what people find important: I’ve had customers asking for things for years. When I first joined Google, a lot of what customers wanted to see simply didn’t exist or required considerable customization. SecOps has come a long way from its days as Backstory and Chronicle, which had raw power and a barebones, DIY analysis engine, having grown into a much more capable platform.
This didn’t happen in a vacuum! Much of what has come about in the product is the direct result of customer feedback, with customers telling us what they need to arm their teams to keep their own institutions safe. The Siemplify and Mandiant acquisitions have played their part, and SecOps also continued incorporating more core Google security capacities to offer improved detection and analysis capabilities.
It’s this customer-driven evolution that has led to real results. I’ve had people return from an earlier view of Chronicle surprised to see how far it's come as Google SecOps, and the work continues as you’ll see in these videos. We like to emphasize our agentic workflows which are helping make everyone more productive, as well as our active threat intelligence and Google scale and speed.
I’m also proud to say that the analyst community has taken notice of our advancements. The latest Gartner Magic Quadrant for SIEM promoted Google SecOps to Leaders, the culmination of years of hard work. Google also ranked 2nd in all three use cases for the 2025 Gartner Critical Capabilities for SIEM.
But back to the video series, in which I try to distill a number of customer asks:
- Finding Frontline Threats with Google Threat Intelligence Detections demonstrates what happens when you apply a rigorous data platform to a rich threat intelligence source.
- Visualize Security Data to Spot What Matters Most shows how you can use visualization tools in SecOps to bring and share meaning from your telemetry and the analytics you apply to that telemetry.
- Spotting Threats Faster with Statistical Analysis shows how you can leverage the computing
- power of Google to find the unknown unknowns - the evasive, stealthy behaviors that would otherwise go unnoticed by your analysts.
- Get Up and Running with Google Security Operations takes a step back to provide a broad view of just how much comes with Google SecOps out of the box: core capabilities that provide immediate results for users of all levels.
- Assessing and Enforcing an Endpoint DLP Strategy is an examination in how you can use Google SecOps to look at output from a data loss protection tool and find broader patterns and signs of bad intentions.
Thanks for watching! Check out the entire series here → Playlist